aboutsummaryrefslogtreecommitdiff
path: root/modules/pam_faildelay
diff options
context:
space:
mode:
Diffstat (limited to 'modules/pam_faildelay')
-rw-r--r--modules/pam_faildelay/.cvsignore8
-rw-r--r--modules/pam_faildelay/Makefile.am31
-rw-r--r--modules/pam_faildelay/README.xml41
-rw-r--r--modules/pam_faildelay/pam_faildelay.8.xml136
-rw-r--r--modules/pam_faildelay/pam_faildelay.c231
-rwxr-xr-xmodules/pam_faildelay/tst-pam_faildelay2
6 files changed, 0 insertions, 449 deletions
diff --git a/modules/pam_faildelay/.cvsignore b/modules/pam_faildelay/.cvsignore
deleted file mode 100644
index cc931c87..00000000
--- a/modules/pam_faildelay/.cvsignore
+++ /dev/null
@@ -1,8 +0,0 @@
-*.la
-*.lo
-.deps
-.libs
-Makefile
-Makefile.in
-README
-pam_faildelay.8
diff --git a/modules/pam_faildelay/Makefile.am b/modules/pam_faildelay/Makefile.am
deleted file mode 100644
index 2796018c..00000000
--- a/modules/pam_faildelay/Makefile.am
+++ /dev/null
@@ -1,31 +0,0 @@
-#
-# Copyright (c) 2006 Thorsten Kukuk <kukuk@suse.de>
-#
-
-CLEANFILES = *~
-
-EXTRA_DIST = README $(MANS) $(XMLS) tst-pam_faildelay
-
-man_MANS = pam_faildelay.8
-XMLS = README.xml pam_faildelay.8.xml
-
-TESTS = tst-pam_faildelay
-
-securelibdir = $(SECUREDIR)
-secureconfdir = $(SCONFIGDIR)
-
-AM_CFLAGS = -I$(top_srcdir)/libpam/include -I$(top_srcdir)/libpamc/include
-AM_LDFLAGS = -no-undefined -avoid-version -module
-if HAVE_VERSIONING
- AM_LDFLAGS += -Wl,--version-script=$(srcdir)/../modules.map
-endif
-
-securelib_LTLIBRARIES = pam_faildelay.la
-pam_faildelay_la_LIBADD = -L$(top_builddir)/libpam -lpam
-
-if ENABLE_REGENERATE_MAN
-noinst_DATA = README
-README: pam_faildelay.8.xml
--include $(top_srcdir)/Make.xml.rules
-endif
-
diff --git a/modules/pam_faildelay/README.xml b/modules/pam_faildelay/README.xml
deleted file mode 100644
index 64d4accc..00000000
--- a/modules/pam_faildelay/README.xml
+++ /dev/null
@@ -1,41 +0,0 @@
-<?xml version="1.0" encoding='UTF-8'?>
-<!DOCTYPE article PUBLIC "-//OASIS//DTD DocBook XML V4.4//EN"
-"http://www.docbook.org/xml/4.4/docbookx.dtd"
-[
-<!--
-<!ENTITY pamaccess SYSTEM "pam_faildelay.8.xml">
--->
-]>
-
-<article>
-
- <articleinfo>
-
- <title>
- <xi:include xmlns:xi="http://www.w3.org/2001/XInclude"
- href="pam_faildelay.8.xml" xpointer='xpointer(//refnamediv[@id = "pam_faildelay-name"]/*)'/>
- </title>
-
- </articleinfo>
-
- <section>
- <xi:include xmlns:xi="http://www.w3.org/2001/XInclude"
- href="pam_faildelay.8.xml" xpointer='xpointer(//refsect1[@id = "pam_faildelay-description"]/*)'/>
- </section>
-
- <section>
- <xi:include xmlns:xi="http://www.w3.org/2001/XInclude"
- href="pam_faildelay.8.xml" xpointer='xpointer(//refsect1[@id = "pam_faildelay-options"]/*)'/>
- </section>
-
- <section>
- <xi:include xmlns:xi="http://www.w3.org/2001/XInclude"
- href="pam_faildelay.8.xml" xpointer='xpointer(//refsect1[@id = "pam_faildelay-examples"]/*)'/>
- </section>
-
- <section>
- <xi:include xmlns:xi="http://www.w3.org/2001/XInclude"
- href="pam_faildelay.8.xml" xpointer='xpointer(//refsect1[@id = "pam_faildelay-author"]/*)'/>
- </section>
-
-</article>
diff --git a/modules/pam_faildelay/pam_faildelay.8.xml b/modules/pam_faildelay/pam_faildelay.8.xml
deleted file mode 100644
index d2dfd266..00000000
--- a/modules/pam_faildelay/pam_faildelay.8.xml
+++ /dev/null
@@ -1,136 +0,0 @@
-<?xml version="1.0" encoding='UTF-8'?>
-<!DOCTYPE refentry PUBLIC "-//OASIS//DTD DocBook XML V4.4//EN"
- "http://www.oasis-open.org/docbook/xml/4.4/docbookx.dtd">
-
-<refentry id="pam_faildelay">
-
- <refmeta>
- <refentrytitle>pam_faildelay</refentrytitle>
- <manvolnum>8</manvolnum>
- <refmiscinfo class="sectdesc">Linux-PAM Manual</refmiscinfo>
- </refmeta>
-
- <refnamediv id="pam_faildelay-name">
- <refname>pam_faildelay</refname>
- <refpurpose>Change the delay on failure per-application</refpurpose>
- </refnamediv>
-
- <refsynopsisdiv>
- <cmdsynopsis id="pam_faildelay-cmdsynopsis">
- <command>pam_faildelay.so</command>
- <arg choice="opt">
- debug
- </arg>
- <arg choice="opt">
- delay=<replaceable>microseconds</replaceable>
- </arg>
- </cmdsynopsis>
- </refsynopsisdiv>
-
- <refsect1 id="pam_faildelay-description">
-
- <title>DESCRIPTION</title>
-
- <para>
- pam_faildelay is a PAM module that can be used to set
- the delay on failure per-application.
- </para>
- <para>
- If no <option>delay</option> is given, pam_faildelay will
- use the value of FAIL_DELAY from <filename>/etc/login.defs</filename>.
- </para>
- </refsect1>
-
- <refsect1 id="pam_faildelay-options">
-
- <title>OPTIONS</title>
- <variablelist>
- <varlistentry>
- <term>
- <option>debug</option>
- </term>
- <listitem>
- <para>
- Turns on debugging messages sent to syslog.
- </para>
- </listitem>
- </varlistentry>
- <varlistentry>
- <term>
- <option>delay=<replaceable>N</replaceable></option>
- </term>
- <listitem>
- <para>
- Set the delay on failure to N microseconds.
- </para>
- </listitem>
- </varlistentry>
- </variablelist>
- </refsect1>
-
- <refsect1 id="pam_faildelay-services">
- <title>MODULE SERVICES PROVIDED</title>
- <para>
- Only the <option>auth</option> service is supported.
- </para>
- </refsect1>
-
- <refsect1 id='pam_faildelay-return_values'>
- <title>RETURN VALUES</title>
- <variablelist>
- <varlistentry>
- <term>PAM_IGNORE</term>
- <listitem>
- <para>
- Delay was successful adjusted.
- </para>
- </listitem>
- </varlistentry>
- <varlistentry>
- <term>PAM_SYSTEM_ERR</term>
- <listitem>
- <para>
- The specified delay was not valid.
- </para>
- </listitem>
- </varlistentry>
- </variablelist>
- </refsect1>
-
- <refsect1 id='pam_faildelay-examples'>
- <title>EXAMPLES</title>
- <para>
- The following example will set the delay on failure to
- 10 seconds:
- <programlisting>
-auth optional pam_faildelay.so delay=10000000
- </programlisting>
- </para>
- </refsect1>
-
- <refsect1 id='pam_faildelay-see_also'>
- <title>SEE ALSO</title>
- <para>
- <citerefentry>
- <refentrytitle>pam_fail_delay</refentrytitle><manvolnum>3</manvolnum>
- </citerefentry>,
- <citerefentry>
- <refentrytitle>pam.conf</refentrytitle><manvolnum>5</manvolnum>
- </citerefentry>,
- <citerefentry>
- <refentrytitle>pam.d</refentrytitle><manvolnum>8</manvolnum>
- </citerefentry>,
- <citerefentry>
- <refentrytitle>pam</refentrytitle><manvolnum>8</manvolnum>
- </citerefentry>
- </para>
- </refsect1>
-
- <refsect1 id='pam_faildelay-author'>
- <title>AUTHOR</title>
- <para>
- pam_faildelay was written by Darren Tucker &lt;dtucker@zip.com.au&gt;.
- </para>
- </refsect1>
-
-</refentry>
diff --git a/modules/pam_faildelay/pam_faildelay.c b/modules/pam_faildelay/pam_faildelay.c
deleted file mode 100644
index 072b7dd3..00000000
--- a/modules/pam_faildelay/pam_faildelay.c
+++ /dev/null
@@ -1,231 +0,0 @@
-/* pam_faildelay module */
-
-/*
- * Allows an admin to set the delay on failure per-application.
- * Provides "auth" interface only.
- *
- * Use by putting something like this in the relevant pam config:
- * auth required pam_faildelay.so delay=[microseconds]
- *
- * eg:
- * auth required pam_faildelay.so delay=10000000
- * will set the delay on failure to 10 seconds.
- *
- * If no delay option was given, pam_faildelay.so will use the
- * FAIL_DELAY value of /etc/login.defs.
- *
- * Based on pam_rootok and parts of pam_unix both by Andrew Morgan
- * <morgan@linux.kernel.org>
- *
- * Copyright (c) 2006 Thorsten Kukuk <kukuk@thkukuk.de>
- * - Rewrite to use extended PAM functions
- * - Add /etc/login.defs support
- *
- * Portions Copyright (c) 2005 Darren Tucker <dtucker at zip com au>.
- *
- * Redistribution and use in source and binary forms of, with
- * or without modification, are permitted provided that the following
- * conditions are met:
- *
- * 1. Redistributions of source code must retain any existing copyright
- * notice, and this entire permission notice in its entirety,
- * including the disclaimer of warranties.
- *
- * 2. Redistributions in binary form must reproduce all prior and current
- * copyright notices, this list of conditions, and the following
- * disclaimer in the documentation and/or other materials provided
- * with the distribution.
- *
- * 3. The name of any author may not be used to endorse or promote
- * products derived from this software without their specific prior
- * written permission.
- *
- * ALTERNATIVELY, this product may be distributed under the terms of the
- * GNU General Public License, in which case the provisions of the GNU
- * GPL are required INSTEAD OF the above restrictions. (This clause is
- * necessary due to a potential conflict between the GNU GPL and the
- * restrictions contained in a BSD-style copyright.)
- *
- * THIS SOFTWARE IS PROVIDED ``AS IS'' AND ANY EXPRESS OR IMPLIED
- * WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES OF
- * MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE DISCLAIMED.
- * IN NO EVENT SHALL THE AUTHOR(S) BE LIABLE FOR ANY DIRECT, INDIRECT,
- * INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING,
- * BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS
- * OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND
- * ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR
- * TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE
- * USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH
- * DAMAGE.
- */
-
-#include "config.h"
-
-#include <errno.h>
-#include <ctype.h>
-#include <stdio.h>
-#include <limits.h>
-#include <unistd.h>
-#include <syslog.h>
-#include <string.h>
-#include <stdlib.h>
-
-
-#define PAM_SM_AUTH
-
-#include <security/pam_modules.h>
-#include <security/pam_ext.h>
-
-
-#define BUF_SIZE 8192
-#define LOGIN_DEFS "/etc/login.defs"
-
-static char *
-search_key (const char *filename)
-{
- FILE *fp;
- char *buf = NULL;
- size_t buflen = 0;
- char *retval = NULL;
-
- fp = fopen (filename, "r");
- if (NULL == fp)
- return NULL;
-
- while (!feof (fp))
- {
- char *tmp, *cp;
-#if defined(HAVE_GETLINE)
- ssize_t n = getline (&buf, &buflen, fp);
-#elif defined (HAVE_GETDELIM)
- ssize_t n = getdelim (&buf, &buflen, '\n', fp);
-#else
- ssize_t n;
-
- if (buf == NULL)
- {
- buflen = BUF_SIZE;
- buf = malloc (buflen);
- }
- buf[0] = '\0';
- if (fgets (buf, buflen - 1, fp) == NULL)
- break;
- else if (buf != NULL)
- n = strlen (buf);
- else
- n = 0;
-#endif /* HAVE_GETLINE / HAVE_GETDELIM */
- cp = buf;
-
- if (n < 1)
- break;
-
- tmp = strchr (cp, '#'); /* remove comments */
- if (tmp)
- *tmp = '\0';
- while (isspace ((int)*cp)) /* remove spaces and tabs */
- ++cp;
- if (*cp == '\0') /* ignore empty lines */
- continue;
-
- if (cp[strlen (cp) - 1] == '\n')
- cp[strlen (cp) - 1] = '\0';
-
- tmp = strsep (&cp, " \t=");
- if (cp != NULL)
- while (isspace ((int)*cp) || *cp == '=')
- ++cp;
-
- if (strcasecmp (tmp, "FAIL_DELAY") == 0)
- {
- retval = strdup (cp);
- break;
- }
- }
- fclose (fp);
-
- free (buf);
-
- return retval;
-}
-
-
-/* --- authentication management functions (only) --- */
-
-PAM_EXTERN
-int pam_sm_authenticate(pam_handle_t *pamh, int flags UNUSED,
- int argc, const char **argv)
-{
- int i, debug_flag = 0;
- long int delay = -1;
-
- /* step through arguments */
- for (i = 0; i < argc; i++) {
- if (sscanf(argv[i], "delay=%ld", &delay) == 1) {
- /* sscanf did already everything necessary */
- } else if (strcmp (argv[i], "debug") == 0)
- debug_flag = 1;
- else
- pam_syslog (pamh, LOG_ERR, "unknown option; %s", argv[i]);
- }
-
- if (delay == -1)
- {
- char *endptr;
- char *val = search_key (LOGIN_DEFS);
- const char *val_orig = val;
-
- if (val == NULL)
- return PAM_IGNORE;
-
- errno = 0;
- delay = strtol (val, &endptr, 10) & 0777;
- if (((delay == 0) && (val_orig == endptr)) ||
- ((delay == LONG_MIN || delay == LONG_MAX) && (errno == ERANGE)))
- {
- pam_syslog (pamh, LOG_ERR, "FAIL_DELAY=%s in %s not valid",
- val, LOGIN_DEFS);
- free (val);
- return PAM_IGNORE;
- }
-
- free (val);
- /* delay is in seconds, convert to microseconds. */
- delay *= 1000000;
- }
-
- if (debug_flag)
- pam_syslog (pamh, LOG_DEBUG, "setting fail delay to %ld", delay);
-
- i = pam_fail_delay(pamh, delay);
- if (i == PAM_SUCCESS)
- return PAM_IGNORE;
- else
- return i;
-}
-
-PAM_EXTERN
-int pam_sm_setcred(pam_handle_t *pamh UNUSED, int flags UNUSED,
- int argc UNUSED, const char **argv UNUSED)
-{
- return PAM_IGNORE;
-}
-
-
-#ifdef PAM_STATIC
-
-/* static module data */
-
-struct pam_module _pam_faildelay_modstruct = {
- "pam_faildelay",
- pam_sm_authenticate,
- pam_sm_setcred,
- NULL,
- NULL,
- NULL,
- NULL,
-};
-
-#endif
-
-/* end of module definition */
diff --git a/modules/pam_faildelay/tst-pam_faildelay b/modules/pam_faildelay/tst-pam_faildelay
deleted file mode 100755
index 87f7fd44..00000000
--- a/modules/pam_faildelay/tst-pam_faildelay
+++ /dev/null
@@ -1,2 +0,0 @@
-#!/bin/sh
-../../tests/tst-dlopen .libs/pam_faildelay.so
generated by cgit v1.2.3 (git 2.39.1) at 2025-05-29 19:45:37 +0000